Cert Graveyard Report

Certificate Signer: EIKON S.A.
Certificate Serial: 61 77 57 83 BC C5 FC B6 4B F7 73 CA 17 7B B9 9D

All Cert Graveyard entries are considered malware. Other files by the same certificate serial number should be considered suspect.

Malware Family:

RemotePulse

SHA256 Hash:

bd14c4f23f597ced87a2a57cc0b360d50fe916267b2878727ed1bbbd7b751f41

Certificate Serial:

61 77 57 83 BC C5 FC B6 4B F7 73 CA 17 7B B9 9D

Certificate Signer:

EIKON S.A.

Certificate Issuer:

SSL.com Code Signing Intermediate CA RSA R1

Valid From:

2025-09-26 16:26:00

Valid To:

2026-09-26 16:26:00

Reported:

2026-07-06 19:00:07 UTC

Notes:

Odd signed sample(s) with SubjectCN=EIKON S.A. and with Serial#: 61775783bcc5fcb64bf773ca177bb99d Related to the RemotePulse RAT (RMM?) Other suspicious samples: 4eab52778134487a4233915f30ddeeff9d165a4312a2d8c5256c20072cd8de53 d15115f267b1cd476a1181a3a8dde6c706229da1f7fe13af320a80cba66af37f cd8d2565a674bc78a3b6cbbded6e7a3a3534c74f957bff8a21fc086eaf38c230 b49a36f65c9db7f537944c2373f63c33f90f091cf3dbe970e98915fdd4c2931b